[ovs-dev] [IPv6 Redux 3/6] nicira-ext: Support matching ARP source and target hardware addresses.
Ben Pfaff
blp at nicira.com
Sat Jan 22 16:13:22 UTC 2011
On Sat, Jan 22, 2011 at 3:11 AM, Justin Pettit <jpettit at nicira.com> wrote:
> OpenFlow 1.0 doesn't allow matching on the ARP source and target
> hardware address. This has caused us to introduce hacks such as the
> Drop Spoofed ARP action. Now that we have extensible match, we can
> match on more fields within ARP:
>
> - Source Hardware Address (arp_sha)
> - Target Hardware Address (arp_tha)
>
> Signed-off-by: Justin Pettit <jpettit at nicira.com>
One thing that this commit does not do, that it could do, is to remove
the ODPAT_DROP_SPOOFED_ARP action. It can now be implemented in userspace
without kernel assistance. (This could also be an additional commit, so
it's not a big deal.)
More information about the dev
mailing list